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affairs  presence.  Third,  the  ubiquity 
of  the  Internet  means  that  small  ter¬ 
rorist  groups  can  have  a  global  cyber  presence 
that  rivals  that  of  much  larger  organizations. 
Terrorists  not  only  can  communicate  with 
each  other  from  almost  anywhere  in  the 
world,  but  they  also  can  create  a  Web  site  that 
is  viewed  by  millions  and  possibly  even  exam¬ 
ined  daily  by  media  outlets  for  news  stories. 
Fourth,  the  growth  in  bandwidth  combined 
with  development  of  new  software  has  enabled 
unsophisticated  users  to  develop  and  dissemi¬ 
nate  complex  information  via  the  Internet. 

For  example,  in  December  2004,  “a  militant 
Islamic  chat  room  posted  a  twenty-six- 
minute  video  clip  with  instructions  on  how 
to  assemble  a  suicide  bomb  vest,  along  with  a 
taped  demonstration  of  its  use  on  a  model  of  a 
bus  filled  with  passengers.”2  Finally,  modern 
encryption  technologies  allow  Internet  users 
to  surf  the  Web,  transfer  funds,  and  com¬ 
municate  anonymously— a  serious  (though 
not  insurmountable)  impediment  to  intel¬ 
ligence  and  law  enforcement  organizations 
trying  to  find,  track,  and  catch  terrorists.  To 
achieve  anonymity,  terrorists  can  download 
various  types  of  easy-to-use  computer  security 
software  (some  of  which  is  commercial  and 


using  instant  messaging  or  Web  forums. 
Instructions,  intelligence  information, 
and  even  funds  can  be  sent  and  received  in 
seconds  via  email.  Second,  Internet  use  is  a 
low-cost  proposition.  Terrorist  organizations 
can  now  affordably  duplicate  many  of  the 
capabilities  needed  by  modern  militaries, 
governmental  organizations,  and  businesses: 
a  communications  infrastructure,  intelli¬ 
gence-gathering  operation,  training 
system,  and  media-savvy  public 
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Cyberterrorism  conjures  images  of 
infrastructure  failures,  economic 
disasters,  and  even  large-scale  loss 
of  life.  It  also  receives  a  great  deal 
of  coverage  in  the  press.  While  the  threat  of 
cyberterrorism  is  real,  the  hype  surrounding 
the  issue  often  outpaces  the  magnitude  of  the 
threat.  In  addition,  the  term  itself  deflects 
attention  from  a  more  mundane  but  equally 
serious  problem:  terrorist  organizations  effec¬ 
tively  using  the  Internet  to  stymie  U.S.  efforts 
to  win  the  Long  War. 

The  Internet  enables  terrorist  groups  to 
operate  as  either  highly  decentralized  fran¬ 
chises  or  freelancers.  Similar  to  information 
age  businesses,  these  groups  use  the  Internet 
to  create  a  brand  image,  market  themselves, 
recruit  followers,  raise  capital,  identify  part¬ 
ners  and  suppliers,  provide  training  materials, 
and  even  manage  operations.  As  a  result,  these 
groups  have  become  more  numerous,  agile, 


and  well  coordinated,  all  of  which  make  them 
harder  to  stop.1  Furthermore,  these  groups 
have  become  expert  at  using  the  Internet  to 
manipulate  both  public  opinion  and  media 
coverage  in  ways  that  undermine  American 
interests.  In  short,  rather  than  attacking  the 
Internet,  terrorists  are  using  it  to  survive  and 
thrive. 

This  article  examines  why  the  Internet 
is  so  useful  for  terrorist  organizations.  It  then 
considers  how  terrorists  use  the  Internet  for 
strategic  advantage  and  why  the  threat  of 
cyberterrorism  may  be  overstated  in  many 
cases.  The  article  concludes  with  a  set  of 
observations  and  recommendations. 

Why  the  Internet? 

The  Internet  has  five  characteristics  that 
make  it  an  ideal  tool  for  terrorist  organiza¬ 
tions.  First,  it  enables  rapid  communications. 
People  can  hold  conversations  in  real  time 
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some  of  which  is  freely  available)  or  register 
for  anonymous  email  accounts  from  providers 
such  as  Yahoo!  or  Hotmail. 

Internet  as  Strategic  Tool 

The  combination  of  characteristics 
described  above  makes  the  Internet  a  valued 
strategic  asset  for  terrorists.  In  fact,  one  could 
argue  that  the  Internet,  along  with  other 
modern  communications  technologies,  is  a 
sine  qua  non  of  the  modern  global  extremist 
movements.  Successful  terrorism  requires 
the  transformation  of  interested  outsiders 
into  dedicated  insiders.3  Once  someone  has 
become  an  insider,  less  intense  but  still  con¬ 
tinuous  interactions  are  required  to  maintain 
the  needed  level  of  commitment  to  the  cause. 


Subtitle  on  militant  Web  site  stating 
“the  crime  which  indicated  a  complete 
abandonment  of  human  values” 


Before  the  advent  of  advanced  com¬ 
munications  technologies,  this  process  was 
entirely  based  on  face-to-face  interactions, 
which  limited  the  scope  of  a  given  group. 
However,  the  Internet  allows  groups  to  create 
and  identify  dedicated  insiders— and  to 
maintain  fervor  in  those  already  dedicated  to 
the  cause— on  a  global  scale.4  Advanced  tech¬ 
nologies  also  allow  the  extremists  to  deliver 
well- coordinated  propaganda  campaigns 
that  increase  the  levels  of  support  among  the 
general  public,  which  in  turn  allows  terror¬ 
ists  to  operate  freely  in  these  societies.  For 
example,  one  of  al  Qaeda’s  goals  is  to  use  the 
Internet  to  create  “resistance  blockades”  in 
order  to  prevent  Western  ideas  from  “further 
corrupting  Islamic  institutions,  organiza¬ 
tions,  and  ideas.”5  One  technique  they  use  is 
to  distribute  Internet  browsers  that  have  been 
designed  to  filter  out  content  from  undesir¬ 
able  sources  (for  example,  Western  media) 
without  the  users’  knowledge.6 

In  summary,  the  development  and  pro¬ 
liferation  of  the  Internet  have  enabled  the  rise 
of  loose,  decentralized  networks  of  terrorists 
all  working  toward  a  common  goal.  In  the 


words  of  one  expert,  “it  is  the  strategic— not 
operational— objectives  of  the  jihadi  move¬ 
ment’s  use  of  technology  that  engenders  the 
most  enduring  and  lethal  threat  to  the  United 
States  over  the  long  term.”7 

Cyberterrorism? 

It  is  evident  that  terrorist  groups  are 
extremely  effective  in  using  the  Internet  to 
further  their  missions.  Are  they  also  using,  or 
planning  to  use,  the  Internet  to  launch  a  major 
cyber  attack  on  the  United  States?  We  do  not 
know,  but  there  are  a  number  of  factors  that 
suggest  the  answer  to  this  question  is  no.  Ter¬ 
rorism,  by  definition,  is  focused  on  obtaining 
desired  political  or  social  outcomes  through 
the  use  of  tactics  that  instill  fear  and  horror  in 
target  populations.  Cyber¬ 
terror  can  be  defined  as: 

a  computer  based  attack 
or  threat  of  attack 

or  coerce  governments 
or  societies  in  pursuit  of 
goals  that  are  political, 
religious,  or  ideological. 

The  attack  should  be  suf-  Islamic  Web  site 
ficiently  destructive  or  disruptive  to  generate 
fear  comparable  to  that  from  physical  acts 
of  terrorism.  Attacks  that  lead  to  death  or 
bodily  injury,  extended  power  outages,  plane 
crashes,  water  contamination,  or  major  eco¬ 
nomic  losses  would  be  examples. . . .  Attacks 
that  disrupt  nonessential  services  or  that  are 
mainly  a  costly  nuisance  would  not.8 

History  shows  that  the  vast  majority  of 
cyber  attacks,  even  viruses  that  cause  billions 
of  dollars  of  damage  to  an  economy,  are  not 
going  to  cause  the  levels  of  fear  desired  by 
most  terrorists.  In  comparison,  using  physical 
means  to  create  terror  is  fairly  easy  and  quite 
effective.  Put  in  these  terms,  it  is  not  surpris¬ 
ing  that  terrorists  prefer  to  inflict  damage 
with  physical  means  and  then  use  the  Internet 
to  magnify  the  results  of  their  handiwork. 
Indeed,  while  there  is  clear  evidence  that 
terrorists  have  used  the  Internet  to  gather 
intelligence  and  coordinate  efforts  to  launch 
physical  attacks  against  various  infrastructure 
targets,  there  has  not  been  a  single  docu¬ 
mented  incidence  of  cyberterrorism  against 
the  U.S.  Government.9 

One  could  argue  that  terrorists  would 
use  the  Internet  to  attack  cyber  assets  that 
control  physical  systems,  thereby  creating 


horrific  physical  effects  via  cyber  means.  The 
most  likely  scenario  of  this  type  is  an  attack 
on  the  control  systems  that  manage  parts 
of  the  Nation’s  infrastructure  (for  example, 
dams,  trains,  and  powerplants).  The  con¬ 
sequences  of  an  attack  of  this  kind  would 
be  serious,  so  this  threat  deserves  attention. 
However,  the  actual  likelihood  of  such  an 
attack  is  unknown;  different  analyses  have 
reached  different  conclusions.10 

Two  things  are  certain:  successfully 
launching  such  an  attack  would  not  be  easy, 
and  the  consequences  are  difficult  to  predict 
due  to  the  incredible  complexity  and  inter¬ 
dependence  of  critical  infrastructures.  Given 
a  choice  of  conducting  either  a  cyber  attack 
whose  consequences  are  unknown  (and  which 
may  not  have  the  desired  effect 
even  if  it  does  work)  or  a  physical 
attack  that  is  almost  certain  to 
cause  graphic  deaths  that  will 
create  fear,  it  is  understand¬ 
ing 

chosen  the  latter. 

Observations 

Terrorists  use  the  Internet 
to  harm  U.S.  national  security, 
but  not  by  attacking  infrastructure  or  military 
assets  directly.  Instead,  terrorists  use  the 
Internet  to  improve  their  operational  effec¬ 
tiveness  while  simultaneously  undermining 
our  military  and  diplomatic  efforts  to  win  the 
war  of  ideas.  There  is  little  doubt  that  they  are 
doing  both  things  well.  While  there  is  a  possi¬ 
bility  that  they  may  use  the  Internet  to  launch 
a  cyberterror  attack  against  American  targets, 
this  threat  falls  under  the  broad  umbrella  of 
critical  infrastructure  protection— a  topic  that 
is  getting  a  great  deal  of  attention  at  all  levels 
of  government.11  This  issue  is  not  addressed 
here.  Rather,  the  focus  rests  on  the  other  two 
uses  of  the  Internet— issues  that  are  equally 
important  but  often  receive  comparatively  less 
focus,  energy,  and  resources. 

Terrorist  Operational  Effectiveness.  The 
Internet  enables  terrorist  organizations  to 
operate  as  virtual  transnational  organiza¬ 
tions.  They  can  use  it  to  raise  funds,  recruit, 
train,  command  and  control,  gather  intel¬ 
ligence,  and  share  information.  Clearly,  it 
is  in  the  U.S.  interest  to  either  disrupt  or 
undermine  these  activities.  The  good  news  is 
that  relying  on  the  Internet  is  a  double-edged 
sword  for  terrorist  organizations:  despite 
the  many  benefits  associated  with  using  the 
Internet  as  their  main  intelligence,  command 
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and  control,  and  communications  system, 
this  approach  carries  a  few  liabilities.  Ter¬ 
rorist  reliance  on  Web  sites  and  discussion 
forums  allows  outsiders  to  monitor  their 
methods  and  track  trends.  For  example,  there 
are  groups  such  as  the  SITE  Institute  that 
focus  on  monitoring  terrorist  Web  sites  and 
providing  information  to  a  wide  range  of 
interested  parties,  including  elements  within 
the  U.S.  Government.12  Reliance  on  the  Inter¬ 
net  also  creates  the  opportunity  for  outsiders 
to  pose  as  insiders  in  order  to  provide  misin¬ 
formation  or  simply  to  create  doubt  among 
the  terrorists  about  whom  they  can  trust. 

To  that  end,  the  United  States  should 
make  every  effort  to  infiltrate  extremist  virtual 
communities  in  order  to  gather  intelligence 


Fatah  commander  in  Lebanon  with 
ties  to  al  Qaeda  using  Internet 


and  begin  planting  the  seeds  of  mistrust  that 
can  disable  terrorist  cells.  We  presume  that 
governmental  activities  of  this  kind  are  under 
way.  Surprisingly,  nongovernmental  organiza¬ 
tions  appear  to  contribute  to  these  efforts  as 
well.  For  example,  individual  citizens  have 
infiltrated  terrorist  networks  via  chat  rooms 
and  then  worked  with  governmental  agencies 
to  bring  about  several  arrests.13 

The  bad  news  is  that  terrorists  are  doing 
their  best  to  minimize  the  liabilities  associated 
with  heavy  reliance  on  the  Internet.  They  are 
quick  to  learn  from  mistakes  and  to  dissemi¬ 
nate  best  practices  on  how  to  defeat  the  tactics 
used  by  intelligence  and  law  enforcement 
agencies.14  Terrorist  groups  are  adept  at  quickly 
moving  their  Web  sites  from  host  to  host, 
which  makes  them  difficult  to  track  and  shut 
down  (trusted  members  of  these  groups  use 
chat  rooms,  email,  and  other  forums  to  share 
information  about  the  new  location  of  a  moved 
site).  They  also  like  to  masquerade  some  activi¬ 
ties  as  legitimate  business  operations. 

Terrorist  Influence  Operations.  One  of 
the  most  difficult  challenges  facing  the  United 
States  is  countering  terrorist  use  of  the  Inter¬ 


net  to  propagate  their  ideological  agenda.  This 
problem  is  part  of  the  much  broader  war  of 
ideas  against  the  extremist  Islamic  movement. 
Efforts  to  date  have  not  proven  successful,  as 
evidenced  by  the  following  statement  from 
former  Secretary  of  Defense  Donald  Rums¬ 
feld:  “If  I  were  grading  I  would  say  we  prob¬ 
ably  deserve  a  CD’  or  a  CD -plus’  as  a  country  as 
to  how  well  were  doing  in  the  battle  of  ideas 
that’s  taking  place  in  the  world  today.”15  This 
is  a  complex  issue  that  does  not  lend  itself  to 
easy  answers. 

Recommendations 

U.S.  efforts  to  influence  must  be  tied  to 
real-world  actions.  While  it  is  easy  to  focus 
on  the  principles  of  effective  communications 
strategies,  our  words 
will  ring  hollow  if  they 
are  not  related  to  the 
realities  experienced 
by  the  target  audience. 

Thus,  it  goes  without 
saying  that  what  the 
United  States  does  is  as 
important,  if  not  more 
so,  as  what  it  says.  To 
that  end,  diplomatic 
and  military  influence 
operations  must  ensure 
that  target  audiences  are 
aware  of  the  positive  actions  undertaken  by 
the  United  States  in  the  Muslim  world,  while 
simultaneously  highlighting  the  negative 
actions  of  our  enemies. 

The  corollary  to  this  point  is  that  the 
United  States  must  effectively  get  its  story 
out  before  the  terrorists  or  insurgents  can  use 
the  Internet  to  spin  events  in  their  favor.  It  is 
much  harder  to  respond  to  or  discredit  initial 
stories,  even  ones  that  are  untrue,  than  to 
establish  the  baseline  facts  or  perceptions  in 
the  first  place.  There  are  certainly  elements  of 
the  U.S.  Government  making  heroic  efforts 
in  this  area.  For  example,  the  Department  of 
State  maintains  a  Web  site  in  a  number  of  lan¬ 
guages  (including  Arabic,  Farsi,  and  French) 
that  is  devoted  to  countering  false  stories  that 
appear  in  extremist  sources.  It  also  focuses  on 
countering  disinformation  likely  to  end  up  in 
the  mainstream  media.  U.S.  Embassies  have 
used  this  resource  to  counter  disinformation 
in  extremist  print  publications  in  Pakistan 
and  elsewhere.  There  are  also  military  units 
deployed  overseas  that  are  exhibiting  best 
practices  in  operational  level  influence  opera¬ 
tions.16  Unfortunately,  much  work  remains  to 


be  done  for  such  examples  to  become  the  rule 
rather  than  the  exception. 

A  related  point  is  that  the  Nation  must 
view  the  war  of  ideas  as  equal  in  importance 
to  the  military  and  law  enforcement  aspects 
of  the  war  on  terror.  The  war-of-ideas  aspect 
of  any  decision  involving  the  Long  War  must 
be  considered  at  the  highest  levels  of  U.S. 
policymaking.  That  emphasis  must  then  be 
communicated  down  the  chain  so  that  all 
players  understand  the  importance  of  message 
in  this  war.  Strategic  communications  cannot 
be  seen  as  an  afterthought  of  a  military  opera¬ 
tion  or  as  the  sole  responsibility  of  an  office 
buried  within  the  State  Department.  The 
recent  announcement  that  the  Office  of  the 
Secretary  of  Defense  is  creating  a  new  office 
focused  on  strategic  com¬ 
munications  is  a  move  in  the 
right  direction.  Similarly, 
information  operations 
cannot  be  viewed  simply  as 
a  set  of  activities  done  by  a 
local  commander  in  support 
of  tactical  objectives.  It  is 
clear  from  past  experience 
that  such  approaches  are  not 
effective  in  the  long  run  if 
they  are  not  tied  to  strategic 
considerations. 

Countering  terrorist  use  of 
the  Internet  to  further  ideological  agendas 
will  require  a  strategic,  government-wide 
(interagency)  approach  to  designing  and 
implementing  policies  to  win  the  war  of 
ideas.  For  example,  to  counter  terrorist  influ¬ 
ence  operations,  all  Federal  agencies  should 
use  the  same  specific  and  accurate  language 
when  referring  to  Salafist  extremists.  It  is 
of  the  utmost  importance  that  American 
policymakers  set  their  terms  of  the  debate. 
Expressions  such  as  jihad  and  mujahideen  are 
part  of  the  popular  lexicon  describing  antiter¬ 
rorist  operations  in  Iraq,  Afghanistan,  and 
elsewhere.  However,  such  terms  disempower 
the  United  States.  Jihad  literally  means  “striv¬ 
ing”  and  is  frequently  used  to  describe  every 
Muslim’s  responsibility  to  strive  in  the  path 
of  God.  Mujahideen  is  closely  translated  to 
mean  “holy  warriors.”  Such  a  term  may  have 
worked  to  U.S.  advantage  in  Afghanistan 
against  the  Soviet  Union — however,  terms 
such  as  these  now  pit  the  United  States  as  the 
enemy  against  holy  warriors  in  a  holy  war. 
Rather,  terms  such  as  hirabah  (“unholy  war”) 
and  irhabists  (“terrorists”)  should  become 
part  of  the  popular  lexicon.17 


Islamic  Media  Center  Web  site  listing 
Web  sites  promoting  terrorism 
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As  important  as  it  is  for  the  United  States 
to  improve  its  own  communications  efforts,  a 
key  part  of  countering  extremist  misinforma¬ 
tion  and  propaganda  is  to  have  messages  come 
from  a  variety  of  sources— preferably  some  of 
them  local.  For  example,  it  is  critical  for  the 
United  States  to  promote  the  views  of  well- 
respected  Muslim  clerics,  who  counter  the 
claims  made  by  Islamic  terrorists  and  extrem¬ 
ists.  Such  efforts  have  been  undertaken  by  the 
government  of  Saudi  Arabia,  but  American 
efforts  in  this  area  have  been  lacking.18  In 
effect,  the  Nation  should  do  everything  pos¬ 
sible  to  enable  moderate  Muslims  to  develop 
a  strong,  vibrant,  and  responsive  Internet  and 
media  presence  of  their  own. 


ideology,  manipulate  the  public  and  media, 
recruit  and  train  new  terrorists,  raise  funds, 
gather  information  on  potential  targets,  and 
control  operations.  If  these  activities  can  be 
curtailed,  then  the  viability  of  the  terrorist 
groups  themselves  may  be  put  into  question. 
To  that  end,  the  United  States  needs  to  focus 
more  resources  into  two  areas:  countering 
the  operational  effectiveness  associated  with 
terrorist  use  of  the  Internet,  and  undermining 
Internet-based  terrorist  influence  operations. 
If  it  can  successfully  meet  these  two  chal¬ 
lenges,  the  United  States  will  make  significant 
progress  toward  winning  the  Long  War.  JFQ 
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